The default configuration provided in C:\Program Files (x86)\TransformationServer\tomcat\webapps\transformation-backend\WEB-INF\classes\default-configuration.properties is shown below:
# Configuration for HTML sanitizer # Sample configuration for HTML sanitizer # Modes are WHITELIST, BLACKLIST, NONE (Use at own risk, not recommended) sanitizer.mode=BLACKLIST # Only works with BLACKLIST mode. Sample: sanitizer.disallowed.elements=a,script,iframe,style sanitizer.disallowed.elements= # Only works with BLACKLIST mode. Sample: sanitizer.disallowed.attributes=a.onclick,a.onmouseover,img.onerror,button.onclick (element.attribute) sanitizer.disallowed.attributes= # Only works with WHITELIST mode. Sample: sanitizer.allowed.elements=p,div,span,ul,ol,li,h1,h2,h3,a sanitizer.allowed.elements= # Only works with WHITELIST mode. Sample: sanitizer.allowed.attributes=a.href,a.target,img.src,img.alt,div.class (element.attribute) sanitizer.allowed.attributes=
You can override the default configuration in C:\Program Files (x86)\TransformationServer\tomcat\webapps\transformation-backend\WEB-INF\classes\custom-configuration.properties.